remotion-captions
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes examples of using Node.js execSync to run ffmpeg commands for audio preprocessing, which is a standard requirement for video automation tools.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the @remotion/install-whisper-cpp library to securely download transcription models and the Whisper.cpp binary from known project infrastructure.
- [REMOTE_CODE_EXECUTION]: The skill automates the local installation and execution of an external transcription engine (Whisper.cpp) using helper functions from trusted framework-specific packages.
- [DATA_EXPOSURE]: The skill scripts access local media files and subtitle data to generate JSON-based captions for video rendering, which is the primary intended function of the skill within a development context.
Audit Metadata